{"id":57979,"date":"2026-05-17T04:38:19","date_gmt":"2026-05-17T04:38:19","guid":{"rendered":"https:\/\/www.bitrabo.com\/discover\/?p=57979"},"modified":"2026-05-17T04:38:19","modified_gmt":"2026-05-17T04:38:19","slug":"thorchain-exploit-raises-security-concerns-in-defi","status":"publish","type":"post","link":"https:\/\/www.bitrabo.com\/discover\/thorchain-exploit-raises-security-concerns-in-defi\/","title":{"rendered":"Thorchain Exploit Raises Security Concerns in DeFi"},"content":{"rendered":"\n<p>Recently, <strong>Arkham Intelligence<\/strong>, a noted blockchain tracking firm, identified a group of suspicious cryptocurrency wallets associated with a major incident impacting <strong>THORChain<\/strong>. One of these wallets, linked to Bitcoin, reportedly contains approximately <strong>36.85 BTC<\/strong>\u2014valued around $3 million\u2014and another wallet tied to Ethereum holds about <strong>216 ETH<\/strong>. These addresses have already been publicly flagged by security analysts.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Initial_Detection_of_the_Incident\"><\/span>Initial Detection of the Incident<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The first to uncover the suspicious activities was on-chain investigator <strong>ZachXBT<\/strong>. He noted unusual transactions related to THORChain\u2019s routing system and detailed how attackers moved approximately <strong>$7.2 million<\/strong> worth of assets\u2014including <strong>USDT<\/strong>, <strong>USDC<\/strong>, and wrapped Bitcoin\u2014across multiple blockchains, subsequently converting them into Ethereum.<\/p>\n<p>Initially, ZachXBT estimated the losses at above <strong>$7.4 million<\/strong>, but this figure was later revised to suggest that the total amount stolen could exceed <strong>$10 million<\/strong>.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p dir=\"ltr\" lang=\"en\">Upon reviewing the numbers and the chains involved, the estimated stolen amount now appears to be above $10M.<\/p>\n<p>\u2014 ZachXBT (@zachxbt) <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/twitter.com\/zachxbt\/status\/2055227238224908734?ref_src=twsrc%5Etfw\" rel=\"noopener nofollow\">May 15, 2026<\/a><\/p>\n<\/blockquote>\n<p>THORChain operates as a cross-chain trading protocol, allowing users to exchange cryptocurrency across various blockchain platforms without needing a centralized intermediary. However, this cross-chain nature has made it susceptible to vulnerabilities, evidenced by the attack that affected Bitcoin, Ethereum, BNB Chain, and Base simultaneously.<\/p>\n<p>Additional investigations by <strong>PeckShield<\/strong>, a security firm, corroborated the breach. Their computations suggest that attackers secured approximately <strong>36.75 BTC<\/strong> (around $3 million) alongside an estimated <strong>$7 million<\/strong> taken from Ethereum, BNB Chain, and Base.<\/p>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"size-full\" src=\"https:\/\/www.tradingview.com\/x\/5DLAtNfW\/\" width=\"1814\" height=\"921\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Market_Response_and_Institutional_Communication\"><\/span>Market Response and Institutional Communication<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Following the news of the breach, the price of <strong>RUNE<\/strong>, THORChain\u2019s native token, fell by approximately <strong>14%<\/strong>, dipping toward the <strong>$0.50<\/strong> threshold as traders sought to manage their risk exposure. This rapid decline heightened market tension, exacerbated by the absence of a prompt official statement from THORChain regarding the incident and its implications.<\/p>\n<p>As of this reporting, THORChain has not provided any updates on the status or measures being undertaken to address the situation. This lack of communication has led to increased uncertainty among investors and participants in the market.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Recurring_Challenges_in_Decentralized_Finance\"><\/span>Recurring Challenges in Decentralized Finance<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The THORChain incident highlights a troubling trend in the decentralized finance (DeFi) space. Cross-chain infrastructures are often targeted due to their inherent complexities, which can lead to vulnerabilities.<\/p>\n<ul>\n<li>Cross-chain bridges and routing systems are essential yet complicated.<\/li>\n<li>Increased complexity often leads to unforeseen security gaps.<\/li>\n<li>This incident reflects a growing pattern of significant losses within DeFi protocols.<\/li>\n<\/ul>\n<p>The compromised assets currently remain within the flagged wallets, though their future movement remains uncertain.<\/p>\n<p><em>Image credit: Unsplash; Chart source: TradingView<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recently, Arkham Intelligence, a noted blockchain tracking firm, identified a group of suspicious cryptocurrency wallets associated with a major incident impacting THORChain. One of these wallets, linked to Bitcoin, reportedly contains approximately 36.85 BTC\u2014valued around $3 million\u2014and another wallet tied to Ethereum holds about 216 ETH. These addresses have already been publicly flagged by security [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"slim_seo":{"title":"Thorchain Exploit Raises Security Concerns in DeFi - Bitrabo","description":"Recently, Arkham Intelligence , a noted blockchain tracking firm, identified a group of suspicious cryptocurrency wallets associated with a major incident impac"},"footnotes":""},"categories":[316],"tags":[1196,551,1293,1854,650,16871,1185],"class_list":["post-57979","post","type-post","status-publish","format-standard","hentry","category-crypto-news","tag-10m","tag-defi","tag-exploit","tag-fears","tag-security","tag-thorchain","tag-triggers"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/posts\/57979","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/comments?post=57979"}],"version-history":[{"count":0,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/posts\/57979\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/media?parent=57979"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/categories?post=57979"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.bitrabo.com\/discover\/wp-json\/wp\/v2\/tags?post=57979"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}